Infrastructure operations
The Infrastructure operations page (/infra-ops) gathers the infrastructure work of a cluster: security lock,
SSH policy, blueprints, Kubernetes target, agents, HA groups, backups and connections. It needs cluster:read; each
action needs the permission of its domain (cluster:manage, hosts:manage, services:install, services:operate,
backup:manage, dr:manage, auth:manage, users:read, connections:read).
Actions
| Button | Effect | Permission |
|---|---|---|
| Security lock, Remove the security lock | while locked, the cluster refuses new operations | cluster:manage |
| Edit the SSH policy | users, keys and fingerprints allowed for the SSH bootstrap | cluster:manage |
| Apply a blueprint | installs a whole topology (operation blueprint.apply) | cluster:manage and services:install |
| Edit the Kubernetes target, Minimal import RBAC, Open the Kubernetes page | Kubernetes connection of the cluster | cluster:manage |
| Revoke the agent | revokes the identity of a host agent | hosts:manage |
| Break glass request | temporary privileged access, approved by others | hosts:manage |
| New HA group | groups the instances that fail over together | services:operate |
| Service checks, Upgrade information | state of the checks and upgrades of the services | cluster:read |
Typical tasks
- Freeze a cluster during an incident. Security lock; remove it with Remove the security lock when the incident is closed.
- Rebuild a cluster. Apply a blueprint exported from another cluster.